This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences

SSL Decryption

Traffic that has been encrypted using the protocols SSL and SSH can be decrypted to ensure that these protocols are being used for the intended purposes only, and not to conceal unwanted activity or malicious content.
cancel
Turn on suggestions
Showing results for 
Show  only  | Search instead for 
Did you mean: 

SSL Decryption

Traffic that has been encrypted using the protocols SSL and SSH can be decrypted to ensure that these protocols are being used for the intended purposes only, and not to conceal unwanted activity or malicious content.

Palo Alto Networks firewalls decrypt encrypted traffic by using keys to transform strings (passwords and shared secrets) from ciphertext to plaintext (decryption) and from plaintext back to ciphertext (re-encrypting traffic as it exits the device).

Discussions

Need answers? Register or Sign-in to Engage, Share, and Learn.
Author Topic Views Replies
Carracido
Carracido
05-14-2025

URL category for anydesk Contains a hyperlink

Hi community! I´m trying to create a url custom category that matches Anydesk traffic so I can decide what non-decrypt rule anydesk is using. In the... — Read more

posted in Next-Generation Firewall Discussions

111 2
CPATT
CPATT
05-13-2025

Solved! Issues with Pre-Defined Decryption Exclusion Contains an image

Hello, I'm trying to figure out any reasons that the decryption exclusion would not be working. As the traffic is being denied: What could I be ... — Read more

posted in General Topics

451 5
MRamadanAHafiez
MRamadanAHafiez
05-14-2025

Solved! SSL vpn VPN and Fortinet stpping support Contains a hyperlink

Hello Team, Regarding the latest new received, We got informed that Fortinet has stopped supporting SSL VPN tunnel mode starting Fort... — Read more

posted in GlobalProtect Discussions

205 1
inSync-MarkValpreda
inSync-MarkValpreda
05-06-2025

URL filtering or tightening up on GlobalProtect security rule?

I have a security rule for my GlobalProtect, and want to see if I can make it even tighter.... Source Zone: untrust (outside) Address\User\Device: A... — Read more

posted in Next-Generation Firewall Discussions

231 1
dinoh
dinoh
05-04-2025

MacOS 15.4.1 unable to connect SSL VPN via GlobalProtect 6.2.8 Contains an image

OS version: 15.4.1 (24E263) GlobalProtect version: 6.2.8-183 PA-820 Hi, Does anyone get into a similar issue when I try to connect SSL VPN shows "Co... — Read more

1 posted in GlobalProtect Discussions

383 1
Join now

Blogs

DOTW: What Are Cipher Suites? Contains an image Contains a hyperlink

01-06-2022 — Find out what are cipher suites and which ones are supported for the different features on your device in this Discussion of the Week. Find out what are cipher suites and which ones are supported for the different features on your device in this D... — Read more

Labels: Administration Decryption How to SSL SSL Decryption tls
6387 3 by in Community Blogs

The Increasing Necessity for SSL Decryption Contains an image Contains a hyperlink

07-07-2021 — From performance abilities to new hardware, SSL Decryption capabilities have been greatly improved. — Read more

Labels: NGFW SSL Decryption
9135 6 by in Community Blogs

More on SSL Decryption Contains an image Contains a hyperlink

08-07-2020 — Read how SSL Decryption gives the ability to view inside of Secure HTTP traffic (SSL) as it passes through the Palo Alto Networks firewall. — Read more

Labels: NGFW Configuration PAN-OS SSL Decryption SSL Forward Proxy
22592 3 8 by in Community Blogs

HTTP/2 Inspection Contains an image Contains a hyperlink

07-09-2020 — Starting with PAN-OS 9.0.0, HTTP/2 inspection is supported on Palo Alto Networks firewalls. Learn more here! — Read more

Labels: Decryption HTTP NGFW Configuration PAN-OS PAN-OS 9.0 SSL Decryption
20091 2 9 by in Community Blogs

AddTrust External CA Root Expired Contains an image Contains a hyperlink

06-05-2020 — AddTrust External CA Root expired on 30th of May, 2020. Find out how this can impact your traffic and how to fix this! — Read more

Labels: certificate Decryption SSL Decryption
9801 2 2 by in Community Blogs

View All

Articles

Tips & Tricks: SSL Forward Proxy Contains an image Contains a hyperlink

05-22-2023 — In today's digital world, where encryption is all around us, SSL decryption becomes a real superhero in the fight against hidden threats and bolstering network security. Luckily, Palo Alto Networks Next-Generation Firewall comes to the rescue with... — Read more

Labels: Network Security Next-Generation Firewall SSL Decryption
8488 4 2 by in General Articles

Nominated Discussion: URL Filtering in TLS v1.3 Contains a hyperlink

02-28-2023 — — Read more

Labels: Advanced URL Filtering NGFW NGFW Configuration SSL SSL Decryption tls
7279 1 2 by in General Articles

Best Practices for SSL Decryption with Prisma Access Contains an image Contains a video

01-13-2022 — Understand how SSL Decryption with Prisma Access can increase your visibility into network traffic and reduce security threats — Read more

Labels: Best Practices prisma access SSL Decryption SSL Forward Proxy
9865 by in Prisma Access Webinars

SSL Decryption with Prisma Access Contains a video Contains a hyperlink

09-13-2021 — Gain visibility and control over network traffic through SSL Decryption with Prisma Access — Read more

Labels: prisma access SSL Decryption
6723 by in Prisma Access Webinars

Keeping Configuration Aligned to Best Practices Contains a hyperlink

03-31-2021 — Configuration changes are always necessary in a network, whether they are for adding new applications, allowing access to users or to create exceptions in security profiles. Prisma Access Cloud Management provides the ability for administrators to make sure that the configuration is always aligne... — Read more

Labels: Prisma Access Cloud Management SSL Decryption
6060 by in Prisma Access Cloud Management Articles

View All

Videos

Best Practices to Implement Decryption On Your NGFWs with Confidence

Published on Oct 17, 2022
1,802 views
30 likes

Digital Learning Courses

Access Palo Alto Networks learning platform to gain free technical insights and educational materials across our full suite of products.

Please note: SSO login is necessary to access the content.

LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2025 - Palo Alto Networks